CVE-2023-33003

CVE-2023-33003 refers to a CSRF vulnerability in Jenkins Tag Profiler Plugin version 0.2 and earlier. The cause is a missing permission check in an HTTP endpoint, allowing attackers with Overall/Read to reset profiler statistics, and the endpoint accepts non-POST requests. Several connected sourc...

PT-2023-24134 · Jenkins · Jenkins Tag Profiler Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Tag Profiler Plugin versions 0.2 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to reset profiler statistics. The issue arises because the plugin does not perform a permission check in an HTT...

Jenkins Tag Profiler Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Jenkins Tag Profiler Plugin 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

CVE-2022-41982

Uncontrolled search path element in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41982

Uncontrolled search path element in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41658

Insecure inherited permissions in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41658

Insecure inherited permissions in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path element in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Insecure inherited permissions in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41658

Insecure inherited permissions in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41658

CVE-2022-41658 affects Intel VTune Profiler prior to 2023.0. The issue is insecure inherited permissions that could enable privilege escalation via local access for an authenticated user. Publicly documented risk and impact come from Intel’s advisory and multiple vulnerability records, which indi...

CVE-2022-41658

Insecure inherited permissions in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41982

Uncontrolled search path element in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41982

CVE-2022-41982 affects Intel VTune Profiler prior to version 2023.0. The issue is an uncontrolled search path element that may allow an authenticated user to escalate privileges via local access. Intel’s advisory INTEL-SA-00771 and Red Hat/NVD entries corroborate the local, privilege-escalation i...

CVE-2022-41982

Uncontrolled search path element in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel VTune Profiler 代码问题漏洞

Intel VTune Profiler is a performance testing tool for optimized software from Intel USA. The software performs performance testing of IoT embedded applications, media software, Java applications, and high-performance computing applications. A security vulnerability exists in Intel VTune Profiler...

PT-2023-14052 · Intel · Intel Vtune Profiler

Name of the Vulnerable Software and Affected Versions: IntelR VTuneTM Profiler versions prior to 2023.0 Description: The issue is related to an uncontrolled search path element in the IntelR VTuneTM Profiler software. This may allow an authenticated user to potentially enable escalation of...

Intel VTune Profiler 安全漏洞

Intel VTune Profiler is a performance testing tool for optimized software from Intel USA. The software performs performance testing of IoT embedded applications, media software, Java applications, and high-performance computing applications. A security vulnerability exists in versions prior to...

PT-2023-14008 · Intel · Intel Vtune Profiler

Name of the Vulnerable Software and Affected Versions: IntelR VTuneTM Profiler versions prior to 2023.0 Description: The issue concerns insecure inherited permissions that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions...